Releasesby GlyphWAF - WAF Release - 2025-09-29
This week highlights four important vendor- and component-specific issues: an authentication bypass in SimpleHelp (CVE-2024-57727), an information-disclosure flaw in Flowise Cloud (CVE-2025-58434), an SSRF in the WordPress plugin Ditty (CVE-2025-8085), and a directory-traversal bug in Vite (CVE-2025-30208).
Also shipped Sep 29, 2025Cloudflare in September 2025 →
Lovable Cloud + Supabase: The Default Platform for AI Builders
Lovable Cloud now uses Supabase as the default backend for all AI-generated projects.
1.141.5 (2025-09-24)
Bug Fixes deps: Update the Java code generator (gapic-generator-java) to 2.62.2 ( c02d304 ) Dependencies Update actions/checkout action to v5 ( #2539 ) ( 83144e6 ) Update actions/github-script action to v8 ( #2542 ) ( 0e6f0da ) Update dependency com.google.cloud:google-cloud-bigquery to v2.55.0 ( #2553 ) ( 15b9e66 ) Update dependency...
2.1.0 (2025-09-25)
Features pubsub/v2: Add subscriber shutdown options ( #12829 ) ( 14c3887 )
Container Images (release 250929)
- quay.io/deepgram/self-hosted-api:release-250929 Equivalent image to: quay.io/deepgram/self-hosted-api:1.159.2 quay.io/deepgram/self-hosted-engine:release-250929 Equivalent image to: quay.io/deepgram/self-hosted-engine:3.104.3 Minimum required NVIDIA driver version: >=570.172.08 quay.io/deepgram/self-hosted-license-proxy:release-250929 Equivalent image to...
This Release Contains The Following Changes
⚠️ Important : Please refrain from using this release version if you run Nova-3 diarization. General Improvements , Keeps our software up-to-date.
Workspace-level AI features toggle
Rolling out to Enterprise plans over the next few weeks, Organization admins can now enable or disable AI features for individual workspaces.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Radar - Regional Data in Cloudflare Radar
Radar now introduces Regional Data, providing traffic insights that bring a more localized perspective to the traffic trends shown on Radar. The following API endpoints are now available: Get Geolocation - Retrieves geolocation by geoId . List Geolocations - Lists geolocations. NetFlows Summary By Dimension - Retrieves NetFlows summary by dimension.
Cloudflare One Client - WARP client for Windows (version 2025.7.176.0)
A new GA release for the Windows WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements. Changes and improvements MASQUE is now the default tunnel protocol for all new WARP device profiles.
Cloudflare One Client - WARP client for macOS (version 2025.7.176.0)
A new GA release for the macOS WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements. Changes and improvements Fixed a bug preventing the warp-diag captive-portal command from running successfully due to the client not parsing SSID on macOS.
Cloudflare One Client - WARP client for Linux (version 2025.7.176.0)
A new GA release for the Linux WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025.
Gateway - Application granular controls for operations in SaaS applications
Gateway users can now apply granular controls to their file sharing and AI chat applications through HTTP policies . The new feature offers two methods of controlling SaaS applications: Application Controls are curated groupings of Operations which provide an easy way for users to achieve a specific outcome.
WAF Release - 2025-09-28 - Emergency
This week highlights multiple critical Cisco vulnerabilities (CVE-2025-20363, CVE-2025-20333, CVE-2025-20362). This flaw stems from improper input validation in HTTP(S) requests. An authenticated VPN user could send crafted requests to execute code as root, potentially compromising the device.
Analytics - New Confidence Intervals in GraphQL Analytics API
The GraphQL Analytics API now supports confidence intervals for sum and count fields on adaptive (sampled) datasets. Confidence intervals provide a statistical range around sampled results, helping verify accuracy and quantify uncertainty. Supported datasets : Adaptive (sampled) datasets only. Supported fields : All sum and count fields.
Containers - Larger Container instance types
New instance types provide up to 4 vCPU, 12 GiB of memory, and 20 GB of disk per container instance. Instance Type vCPU Memory Disk lite 1/16 256 MiB 2 GB basic 1/4 1 GiB 4 GB standard-1 1/2 4 GiB 8 GB standard-2 1 6 GiB 12 GB standard-3 2 8 GiB 16 GB standard-4 4 12 GiB 20 GB The dev and standard instance types are preserved for backward compatibility and...